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DETAILED ACTION 

This action is in response to the papers filed 1/2/2007. Claims 1-11 were received for 
consideration. Claims 1,10, 12-29 were amended. Currently claims 1-29 are under 
consideration. 

Response to Arguments 

Applicant's arguments have been considered but are moot in view of new grounds of 
rejection. Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL, See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1 .136(a). 

Claim Rejections - 35 USC §103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claims 1-10 and 12-29 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Limsico (U.S. Patent # 5,793,952) in view of Ackroff (U.S. Patent # 5,105,438) in further view 
of Kadooka (U.S. Patent # 5,606,663). The Limsico (U.S. Patent # 5,793,952) reference with 
respect to claim 1 teaches a password management system, comprising a graphical user interface 
logic operable to receive a current password from a user, prompt the user to determine whether 
the user desires to change the current password, and responsive to the user response receive a 
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new password (see figure 3 and column 3 line 42-54). Password confirmation logic operable to 
confirm the current password associated with the user on a remote computer system; password 
administration logic, responsive to the password confirmation logic and the graphical user 
interface, operable to receive the new password and to change the current password on the 
remote computer system (see figure 2 and column 4 line 57 - column 5 line 54). The Limsico 
reference does not teach that the remote computer system is a switched access remote test system 
(SARTS) and expiration logic operable to determine if the current password is approaching its 
expiration prior to logging onto the switched access remote test system and is operable to cause 
the user to be prompted to change the current password if the current password is determined to 
be approaching its expiration. The AckrofF reference teaches that the remote computer system is 
a switched access remote test system (see column 3 line 18-29). It would have been obvious at 
the time the invention was made to a person having ordinary skill in the art to which said subject 
matter pertains to have made the remote computer system taught by Limsico to be a switched 
access remote test system as discussed by Ackroff SARTS providides a data base of circuit 
configurations and other key information, and in combination with a human interface for 
accessing circuits, issues test commands and receives measurements. The test equipment is not 
local to the circuit that is in trouble as it is more economical to make the test from a remotely 
centralized location (see column 1 lines 44-50). Therefore one would have been motivated to 
include a switched access remote test system on a password manager that is operable to change 
the current password at determined time or when the user request a change of password to keep 
the Switched access remote test system secure and only qualified user access to the switched 
access remote test system. The Kadooka reference teaches expiration logic operable to determine 
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if the current password is approaching its expiration prior to logging onto the switched access 
remote test system and is operable to cause the user to be prompted to change the current 
password if the current password is determined to be approaching its expiration (see figure 4a). It 
would have been obvious at the time the invention was made to a person having ordinary skill in 
the art to which said subject matter pertains to make it possible to set the available period on the 
system side for each password according to the access frequency of the user whom the password 
identifies, prescribe a password updating period for a certain length of time immediately 
preceding the expiration of the available period, inform the user who logs in the system during 
the updating period that the expiration of his password is imminent by displaying a message 
requesting him to change his password, and thereby urge him to update his password. Therefore 
one would be motivated to warn the user and set different length updating periods so a user who 
seldom accesses the system does not become unable to log in the system because his password 
has run out of its available period even if he never accessed the system during that period (see 
Kadooka column 1 lines 38-58). 

With respect to claim 2, the password confirmation logic is operable to send the current 
password to the switched access remote test system (i.e remote machine as taught by Ackroff) 
and receive a response from the switched access remote test system (i.e remote machine as 
taught by Ackroff also see Limsico column 5 line 43 - column 6 line 65). 

With respect to claim 3, the password confirmation logic is operable to compare the 
response with a plurality of expected responses and determine whether the current password 
provided by the user is valid (see Limsico column 6 lines 5-28). 
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With respect to claim 4, the response is an alphanumeric string, and the plurality of 
expected responses comprises erroneous responses and successful responses (see Limsico 
column 5 line 43 - column 7 line 16). 

With respect to claim 5, the password confirmation logic is operable to instruct the 
graphical user interface logic to provide any of a plurality of error messages to the user upon the 
password confirmation logic determining that the current password provided by the user is not 
valid (see Limsico figure 5B elements 5160, 5 190, and 53 10 "Display Error Message" and 
column 5 line 43 - column 6 line 54). 

With respect to claim 6, the password administration logic performs a password change 
upon receiving a request to change the password from the graphical user interface (see Limsico 
column 5 line 43-54). 

With respect to claim 7, the password administration logic performs a password change 
upon receiving a confirmation of the password from the password confirmation logic (see 
Limsico figure 5C element 5250 "Display Verify Password GUI" and column 6 lines 18-39). 

With respect to claim 8, the password administration logic is operable to send the current 
password and the new password to the switched access remote test system (i.e remote machine as 
taught by AckroflF) and receive a response from the switched access remote test system (i.e 
remote machine as taught by Ackroff), and compare the response to a plurality of expected 
responses (see Limsico column 5 lines 43 and column 7 lines 16). 

With respect to claim 9, the password administration logic is operable to instruct the 
graphical user interface logic to provide any of a plurality of error messages to the user upon the 
password administration logic determining that the new password provided by the user was not 
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accepted by the switched access remote test system (see Limsico figure 5 elements 5160, 5190, 
and 53 10 "Display Error Message" and column 5 line 43 - column 6 line 54). 

With respect to claim 10, the Limsico reference further comprises a password file 
operable to store a set of data comprising the expiration date of the current password; wherein 
the expiration logic is operable to read the password file and request that the graphical user 
interface notify the user that the current password is nearing expiration responsive to the 
expiration date (see Limsico column 9 line 5-40). 

With respect to claim 12 and 29, the Limsico reference teaches, a method of managing 
passwords, comprising the steps of providing a user with a graphical user interface. Receiving a 
current password from the user via the graphical user interface for a remote computer system. 
Prompting the user on whether to change the current password, receiving a new password from 
the user responsive to the user response to the prompting (see figure 3 and column 3 lines 41-54 
and column 4 line 57 - column 5 line 2). Confirming the current password with the remote 
computer system and requesting that the remote computer system change the password 
responsive to the user response to the prompting (see column 5 line 43 - column 6 line 65). The 
Limsico reference does not teach that the remote computer system is a switched access remote 
test system and determining if the current password is approaching its expiration prior to logging 
onto the switched access remote test system. The AckroflF reference teaches that the remote 
computer system is a switched access remote test system (see column 3 line 18-29). It would 
have been obvious at the time the invention was made to a person having ordinary skill in the art 
to which said subject matter pertains to have made the remote computer system taught by 
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Limsico to be a switched access remote test system as discussed by AckrofF. SARTS providides 
a data base of circuit configurations and other key information, and in combination with a human 
interface for accessing circuits, issues test commands and receives measurements. The test 
equipment is not local to the circuit that is in trouble as it is more economical to make the test 
from a remotely centralized location (see column 1 lines 44-50). Therefore one would be 
motivated to include a switched access remote test system on a password manager that is 
operable to change the current password at determined time or when the user request a change of 
password to keep the Switched access remote test system secure and only qualified user access to 
the switched access remote test system. The Kadooka reference teaches determining if the 
current password is approaching its expiration prior to logging onto the switched access remote 
test system (see figure 4a). It would have been obvious at the time the invention was made to a 
person having ordinary skill in the art to which said subject matter pertains to make it possible to 
set the available period on the system side for each password according to the access frequency 
of the user whom the password identifies, prescribe a password updating period for a certain 
length of time immediately preceding the expiration of the available period, inform the user who 
logs in the system during the updating period that the expiration of his password is imminent by 
displaying a message requesting him to change his password, and thereby urge him to update his 
password. Therefore one would be motivated to warn the user and set different length updating 
periods so a user who seldom accesses the system does not become unable to log in the system 
because his password has run out of its available period even if he never accessed the system 
during that period (see Kadooka column 1 lines 38-58). 
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With respect to claims 13 and 22, the confirming the current password further comprises 
sending the current password to the switched access remote test system (i,e remote machine as 
taught by AckrofiF) and receiving a response from the switched access remote test system (i,e 
remote machine as taught by Ackroff also see Limsico column 5 line 43 - column 6 line 65 and 
column 7 line 46 - column 9 line 15). 

With respect to claims 14 and 23, the confirming the current password further comprises 
comparing the response from the switched access remote test system with a plurality of expected 
responses (see Limsico column 5 lines 43 - column 7 lines 1 6). 

With respect to claims 15 and 24, the confirming the current password further comprises 
notifying the user of an error responsive to comparing the response from the switched access 
remote test system (see Limsico column 5 line 43 - column 6 line 65 i.e. an error message is 
displayed at step 5310). 

With respect to claims 16 and 25, the requesting that the switched access remote test 
system (i.e remote machine as taught by Ackroff) change the password responsive to the user 
response to the prompting further comprises sending the new password to the switched access 
remote test system (i.e remote machine as taught by Ackroff) along with the current password 
(see Limsico column 4 line 57 - column 5 line 12 and column 8 line 58-63). 

With respect to claims 17 and 26, the requesting that the switched access remote test (i.e 
remote machine as taught by Ackroff) system change the password responsive to the user 
response to the prompting further comprises receiving a response from the switched access 
remote test system (i.e remote machine as taught by Ackroff) after sending the new password 
(see Limsico column and column 1 1 lines 6-10). 
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With respect to claims 18 and 27, further comprising the step of comparing the received 
response with a plurality of expected responses (see Limsico column 5 line 43 - column 7 line 
16). 

With respect to claims 19 and 28, further comprising the step of providing an error 
message to the user responsive to the comparing the received response (see Limsico figure 5 
elements 5160, 5190, and 5310 "Display Error Message" and column 5 line 43 - column 6 line 
54). 

With respect to claims 20 and 29, further comprising the steps of reading a password file 
to determine an expiration date associated with the current password and prompting the user to 
change the password responsive to determination of the expiration date (see Limsico column 9 
lines 5-40). 

Claim 1 1 is rejected under 35 U.S.C. 103(a) as being unpatentable over Limsico (U.S. 
Patent # 5,793,952) in view of Ackroff (U.S. Patent # 5,105,438) in view of Kadooka (U.S. 
Patent # 5,606,663) in further view of Goldberg et al (U.S. Patent # 5,748,890). Limsico in view 
of AckroflF teaches everything with respect to claim 1 above but with respect to claim 1 1 the 
Limsico in view of AchrofF does not teaches a password management system is operable to 
interact with at least two switched access remote testing systems through a second graphical user 
interface that forms a wrapper for said at least two switched access remote testing system. 
Goldberg teaches a password management system is operable to interact with at least two 
switched access remote testing systems (i,e remote machine as taught by Limsico in view of 
Ackroff) through a second graphical user interface that forms a wrapper for said at least two 
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switched access remote testing system (i,e remote machine as taught by Limsico in view of 
AckrofF, also see Goldberg column 1 lines 26-67). It would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter 
pertains to have modified a remote password management system that would be able to interact 
with at least two host. Therefore one would have been motivated to design a password 
management system that could be use interact with at least two host to make it easier and more 
secure then having one password for each host. Trying to remember different passwords for each 
host is very time consuming, expensive, and ineffective from an accountably standpoint. Have 
one system would have made it a lot easier than having books with host applications and 
corresponding passwords (see column 1 lines 13-55). 

Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
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however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 

Any inquiry concerning this communication or earlier communications from the 
. examiner should be directed to Devin Almeida whose telephone number is (571) 270-1018. The 
examiner can normally be reached on Mon-Thur 8:00-5:30 Second Fri 8:00-4:30 EST. 
If attempts to reach the exaniiner by telephone are unsuccessful, the examiner's supervisor, 
Gilberto Barron can be reached on (571) 272 3799. The fax phone number for the organization 
where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
appUcations is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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Patent Examiner 
Art Unit 2132 
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